cd /etc/rspamd- create
rspamd.conf.local - create lists:
touch local_bl_from.map.inc local_bl_ip.map.inc local_bl_rcpt.map.inc \
local_wl_from.map.inc local_wl_ip.map.inc local_wl_rcpt.map.inc- change permissions:
Alex pautiina
pautiina
/ router.cfg
Created
January 24, 2025 19:06
— forked from marfillaster/router.cfg
MikroTik RouterOS v7 dual DHCP WAN recursive failover w/ PCC load-balancing; and recursive ECMP
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # feb/11/2022 11:00:55 by RouterOS 7.2rc3 | |
| # software id = 9QK9-C798 | |
| # | |
| # model = RB5009UG+S+ | |
| # serial number = XXXXXXXXXX | |
| /ip settings set allow-fast-path=no | |
| /interface bridge add admin-mac=FF:FF:FF:FF:FF:FF auto-mac=no name=bridge |
pautiina
/ DANOS_RAW_CONFIG
Created
December 7, 2022 21:01
— forked from relvinhas/DANOS_RAW_CONFIG
DANOS configuration
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| configure | |
| # Not working with DANOS 2005 | |
| # RFC 1918 private IP networks are set as blackhole routes | |
| # | |
| # set protocols static route 10.0.0.0/8 blackhole distance 254 | |
| # set protocols static route 172.16.0.0/12 blackhole distance 254 | |
| # set protocols static route 192.168.0.0/16 blackhole distance 254 | |
| # delete protocols static route 10.0.0.0/8 |
pautiina
/ rspamd-lists.md
Created
October 26, 2018 18:56
— forked from kvaps/rspamd-lists.md
Howto create local whitelists and blacklists for Rspamd
pautiina
/ sysctl.conf
Created
October 16, 2018 11:53
— forked from jahil/sysctl.conf
calomel.org freebsd network tuning
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # FreeBSD 10.2 -- /etc/sysctl.conf version 0.47 | |
| # https://calomel.org/freebsd_network_tuning.html | |
| # | |
| # low latency is important so we highly recommend that you disable hyper | |
| # threading on Intel CPUs as it has an unpredictable affect on latency, cpu | |
| # cache misses and load. | |
| # | |
| # These settings are specifically tuned for a "low" latency FIOS (300/300) and | |
| # gigabit LAN connections. If you have 10gig or 40gig you will need to increase | |
| # the network buffers as proposed. "man tuning" for more information. |
pautiina
/ FreeBSD - защита kernel NAT от DDoS.md
Last active
June 11, 2018 20:23
Как DHT в торрентах кладёт центральный роутер
Имеется средняя сетка на несколько тысяч абонентов, которая обслуживается центральным сервером на FreeBSD с сервисом NAT-трансляций. И есть лёгкий способ это всё дело категорически поставить на колени.
Проблема происходит так: сеть работает стабильно, без предпосылок к аварии. Внезапно процессор на NAT-сервере резко улетает в полку под 100%, отказывает в обслуживании и не пускает в свою консоль. Если отключаем исходящий трафик (внутреннюю сеть) — проблема не решается, если отключаем входящий трафик (аплинк), то процессор моментально расслабляется. Через 30-40 минут вся симптоматика проходит и не воспроизводится.
То, что сервер не отвечает в момент проблемы, существенно затрудняет диагностирование. Коммутатор на аплинке не показывает никакого аномального роста трафика: PPS и скорость потока в норме.